Deployment Links most used

by butsch 10. February 2011 01:10

Deployment Adobe Reader Products: Update, patch | Acrobat, Reader | Windows, Incremental, Full quartlery? All explained

http://kb2.adobe.com/cps/498/cpsid_49880.html

http://kb2.adobe.com/cps/837/cpsid_83708.html (Understand why to Patch 9.4.2 First after 9.4 and then INC 9.4.3 and 9.4.4.)

Adobe, WPKG Deployment information for Reader and Flash, good samples and direct links to binaries

http://wpkg.org/Flash_Player

Java Runtime

http://wpkg.org/Java 


Flash 10.3 and the Control Panel Update function > In Short mms.cfg DOES override that function (Shows wrong)

IT Administration | Configure Flash Player auto-update notification
http://kb2.adobe.com/cps/167/16701594.html

Flash Player 10.3: disable updates and the new control panel applet
http://www.appdeploy.com/messageboards/tm.asp?m=76415&mpage=1&key=&#76415

 

Tags:

Client Management | Links - Important

Client Managment Security Links

by butsch 14. December 2010 23:41

 

http://blogs.technet.com/b/mmpc/

Microsoft Malware Protection Center Blog, Analyse of actual Malware

http://blogs.technet.com/b/srd/

Suddenly no more info since about 3 months? Security Research & Defense, Microsoft Patch Blog. See what MS writes about their own patches and how ciritical they are and why.

http://isc.sans.edu/diary.html

SANS Internet Storm Center, Daily Updates

http://secunia.com/

Secunia, Latest Security Postings

http://contagiodump.blogspot.com/

Malware Dumps, Samples

http://www.jackcobben.nl/?tag=epo

Some intersting Mcafee News and Posts (EPO/Migration/VSE)

http://krebsonsecurity.com/

Nice Blog with a lot of infos from russia ;-)

http://malwaremustdie.blogspot.ch/2012/12/what-happened-if-red-kit-team-up-with.html

Beautiful Blog with lots of samples, analyse and explanation of code

http://www.digitalattackmap.com/#anim=1&color=0&country=IN&time=16289&view=map

Realtime monitoring of abnormal traffic worlwide with interactive timeline and map (cyberwar illustrated)

http://www.abuse.ch/

Good Blog from Switzerland

http://www.kashifali.ca/category/security-connected/

https://blogs.mcafee.com/tag/network-security

Mcafee related in parts

http://www.fortiguard.com/updates/ips.html

IPS Fortiguard /Fortigate List of Explouts covered in which release

http://socpuppet.blogspot.ch/

Usefull Info for Cisco and Fortigate/Fortimail Firewall and appliances

 

Tags:

Client Management | Deployment | Hotfixes / Updates | Links - Important | Mcafee VSE, EPO, DLP | WSUS

Good Exchange Links for 2007 / 2010

by butsch 23. November 2010 21:55
Can I really use JBOD storage with Exchange 2010?
http://blogs.technet.com/b/ucedsg/archive/2010/05/06/can-i-really-use-jbod-storage-with-exchange-2010.aspx
What is new with Exchange 2010 storage?
http://blogs.technet.com/b/ucedsg/archive/2009/05/11/what-is-new-with-exchange-2010-storage.aspx
Setting Message Size Limits in Exchange 2010 and Exchange 2007
http://exchangepedia.com/2007/09/exchange-server-2007-setting-message-size-limits.html

 

http://www.roland-ehle.de/archives/965
http://blogs.technet.com/b/exchange/archive/2009/12/04/3408943.aspx
Exchange 2010 Request Hotfixes to install "before" SP1
 

Exchange 2010 SP1 FAQ and Known Issues, and 5 Request Hotfixes for Server 2008R2 you should install to get it running perfect 
http://msexchangeteam.com/archive/2010/09/01/456094.aspx 
5 Mentioned Hotfixes for Server 2008 R2 64bit
KB983440
http://thehotfixshare.net/board/index.php?autocom=downloads&showfile=12413 (Reboot NO on CAS)
KB977020 - Fix for: ARS: Win7 roll-up Hotfix for System.Web.Services.dll
http://connect.microsoft.com/VisualStudio/Downloads/DownloadDetails.aspx?DownloadID=27977 (Reboot NO on CAS)
KB979744 - LockConvoy On Windows Server 2003 Post KB 971988
http://code.msdn.microsoft.com/KB979744/Release/ProjectReleases.aspx?ReleaseId=3993 (Reboot YES on CAS)
KB979099 - An update is available to remove the application manifest expiry feature from AD RMS clients.
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=87f72529-d316-42e8-bf77-a46951f66dda&displaylang=en (Reboot YES on CAS)
KB982867
http://code.msdn.microsoft.com/KB982867/Release/ProjectReleases.aspx?ReleaseId=4520 (Reboot YES on CAS)
http://thehotfixshare.net/board/index.php?autocom=downloads&showfile=12354 (Reboot YES on CAS)
 
Security
* How NOT to Deploy Client Access Servers
http://blogs.msdn.com/b/brad_hughes/archive/2008/05/05/how-not-to-deploy-client-access-servers.aspx
DIE Antwort auf die Frage nach mehreren CAS Exchange Servern in einem Forest fuer Intern und Externe CAS etc. Nein, dass steht nicht im Technet ;-)
Repair

 

Performance / Speed / Whats happening
* Logparser and Exchange logs
http://msexchangeteam.com/archive/2007/09/12/446982.aspx
Describes how to use the Logparser.exe to get Data from Logfiles and make automated charts
* Peformance Exchange 2007/2010 Servers, key values
http://technet.microsoft.com/en-us/library/bb201689(EXCHG.80).aspx

 

Activesync / Handy / SSL / Exchange 2007 / 2010 SP1

* Test Exchange Activesnc ONLINE without running an .EXE from strange small company
https://www.testexchangeconnectivity.com/
* Powershell Activesync Stats and Reports
http://knicksmith.blogspot.com/2007/03/dst-and-mobile-devices.html
Identifying users with mobile devices and applying the appropriate patches can be challenging
* Enterprise firewall configuration for Exchange ActiveSync Direct Push Technology
http://support.microsoft.com/kb/905013/en-us

* Controlling Exchange ActiveSync device access using the Allow/Block/Quarantine list
http://msexchangeteam.com/archive/2010/11/15/456931.aspx
http://msexchangeteam.com/archive/2008/09/05/449757.aspx

* Controlling Exchange Active Sync Device access
http://consulting.risualblogs.com/blog/2010/10/19/controlling-exchange-active-sync-device-access/

APPLE IPHONE (Yes Indesign runs faster Gigabyte i7 MB with Thermaltake case than your UGLY apple!)

* How to Securely Deploy iPhones with Exchange ActiveSync in the Enterprise
http://www.expta.com/2010/02/how-to-securely-deploy-iphones-with.html

* Getting your Iphone to work with Exchange Active Sync SSL Certificate
http://www.techsack.com/2008/08/19/getting-your-iphone-to-work-with-exchange-active-sync-ssl-certificate/
“Note that after configuring an Exchange ActiveSync account, all existing contact and calendar information on the iPhone or
iPod touch is overwritten. Additionally, iTunes no longer syncs contacts and calendars with your desktop computer. You can still
sync your iPhone or iPod touch wirelessly with MobileMe services.”
1. On your Iphone, browse your server by typing http OR https://mail.domain.com/certsrv
2. Login with Admin credentials on the users iPhone
3. Click on: Download a CA certificate, certificate chain, or CRL
4. Then click on Encoding method, e.g. Base 64
5. Now click on Download CA certificate
6. On iPhone you will now see a screen to install the certificate.
7. Now the certificate is on iPhone and you can use SSL for activesync feature.
http://msexchangeteam.com/archive/2008/07/11/449196.aspx
iPhone 2.0; Welcome to Exchange!

http://msexchangeteam.com/archive/2010/07/01/455342.aspx
iOS 4 and Exchange ActiveSync

MSFAQ und IPHONE
http://www.msxfaq.de/mobil/iphone.htm
ANDROID (Googles; i can see and hear all you search and speak phone OS)
* Download the Android SDK
http://developer.android.com/sdk/index.html
 
* Guter Blog, Android, SAN Certs, Falsche SAN Certs, Samsung Handy usw.
https://ntx.at/blog/Lists/Kategorien/Category.aspx?Name=Exchange%20Server
* Android 2.1/2.2/2.3 and Exchange Sync
http://blog.brightpointuk.co.uk/quick-look-android-23s-exchange-support
*Android NitroDeesk Touchdown
http://www.nitrodesk.com/dk_touchdownFeatures.aspx
* Do Not buy Android 2.2 phones, they will not work secure with Exchange 2007/2010 and User Certificates WITHOUT buying a ADD On Software
* Do not migrate from 2003 to 2007/2010 without planing and testing if you have Android phones and Certs
http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/bcc50ce4-0c97-4851-987d-1f5080d7942b/
* PIN Lock in Android 2.2 verstellen ohne ROOT-Rechte
http://blog.knecht-ruprecht.info/2011/01/android-22-exchange-passwortabfrage.html

 

2007 SP1 > 2007 SP2 > 2010, Active Directory Schema Links

http://smtpport25.wordpress.com/2010/09/13/verify-exchange-server-schema-version/
Exchange Schema Version 2007 SP1/SP2/2010

Setup / genauer erklärt
http://blogs.technet.com/b/ferris/archive/2010/03/05/howto-install-exchange-2010-step-by-step.aspx

http://technet.microsoft.com/en-us/library/aa998604(EXCHG.140).aspx
Upgrade paths

von 2007 auf 2010 In 2007 Umgebung
http://technet.microsoft.com/en-us/library/bb124350(EXCHG.140).aspx

http://msdn.microsoft.com/en-us/library/dd877014(EXCHG.140).aspx
Exchange Server Changes to the Active Directory Schema

http://technet.microsoft.com/en-us/library/testing-for-active-directory-schema-extension-conflicts(WS.10).aspx
Testing for Active Directory Schema Extension Conflicts

http://www.simple-talk.com/sysadmin/exchange/upgrade-from-exchange-2007-to-exchange-2010---part-iii/

 

2003 > 2010 Migration, Public Folder Mail Activated are not getting E-Mail (ADSIEDIT)

http://social.technet.microsoft.com/Forums/de/exchange_serverde/thread/7dbbadef-3cfe-4e5f-b798-69b0762cdc38

2003 > 2007 > 2010 Corrupted Items, Move Mailbox Request

http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/8d78e08b-4ef9-4b28-a322-98a9dbc436e5

Ersatz für PFDAVAdmin unter Exchange 2010: ExFolders

Tags:

Exchange 2007 | Exchange 2010 | Links - Important

Hotfix Updates how to find what you need

by butsch 3. November 2010 03:37

I have been invloved in several projects where people searched for days and it could hvae been fixed by just a stupid hotfix. This could have been skipped by weekly reading Microsoft Knowledgebase which takes 4 hours per day or use a KB scanner like http://kbupdate.info/. There are rumors that large key customers get those from Dell and HP weekly in a bulletin. This may not be the case for all countrys. The problem is that you always get those for just a single interest group like deployment, exchange or San Storage from some producers (Realy what does effect them).

That means if the SAN-guy comes from the producers he has his Windows Hotfixes for the Data Server on his USB stick but not for the 2008R2 DC which then makes problems as example.

MS, says that you should only such a Hotfix when you have a relevant problem. That is true in terms of risk. But the same Hotfix will get released in a Public SP after months then.

(Well more tested i can only hope).

With Hotfix we do not mean the ones you get via WSUS or WIndows Updates. We mean the ones you have to request from MS.

So check out http://kbupdate.info/ weekly if you don't want to get gey hair and a hear attack. The regular ones are also in those list.

There is also a very good list at: http://windows-update-checker.com/Lists/Win7x64.htm with lots of infos

Monitored Microsoft technologies:

Tags:

Hotfixes / Updates | Links - Important